2d4db089afbfe7c156f0c01944b5b2e3f44a721e034ed4553fa48c2da62dddaa

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
18-08-2024 14:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a6f9e696ea8ceca1c9c7430373fc60a6_JaffaCakes118.exe
Size

21KB
MD5

a6f9e696ea8ceca1c9c7430373fc60a6
SHA1

e7b40e74718aa2b1a57d3cbeae714568bc77eb6f
SHA256

2d4db089afbfe7c156f0c01944b5b2e3f44a721e034ed4553fa48c2da62dddaa
SHA512

ad17343498ba39469fcdc2fd9e2eee7151ec49db668de3e73533d1150d88c6d58a5f14b69c0f9a1687fd4988beb17aa8504f6e1c660930464bba95cefff858b0
SSDEEP

384:Tdqz0g1JSXAxIkA8y4phdHecHlSzstsYFL7ulO6yi7V3JJWNC4JY:TdEx4Ax9Y4DNeGSzwFL7uM6tENCmY

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a6f9e696ea8ceca1c9c7430373fc60a6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a6f9e696ea8ceca1c9c7430373fc60a6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a6f9e696ea8ceca1c9c7430373fc60a6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads